1162 matches found
CVE-2025-50402
FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter string facpassword...
CVE-2025-50399
FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter password...
FAST FAC1200R 安全漏洞
The FAST FAC1200R is a wireless router from China-based FAST FAST. A security vulnerability exists in the FAST FAC1200R that originates from a buffer overflow due to the parameter password in the sub80435780 function...
CVE-2025-50399
The FAST FAC1200R wireless router (specifically model F400_FAC1200R_Q ) is vulnerable to a Buffer Overflow in the sub_80435780 function. The vulnerability is triggered via the password parameter and is classified as a CWE-120 (Classic Buffer Overflow). This flaw allows for high impact on confiden...
CVE-2025-50402
The FAST FAC1200R F400_FAC1200R_Q wireless router is vulnerable to a Buffer Overflow (CWE-120) in the sub_80435780 function. The flaw is triggered by the fac_password parameter string, which allows for improper handling of input data and could lead to a potential compromise. A proof-of-concept ha...
PT-2025-48140
Name of the Vulnerable Software and Affected Versions FAST FAC1200R F400 FAC1200R Q affected versions not specified Description The FAST FAC1200R F400 FAC1200R Q is subject to a buffer overflow condition. This issue occurs in the sub 80435780 function through the password parameter. Recommendatio...
CVE-2025-50399
FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter password...
CVE-2025-50402
FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter string facpassword...
CVE-2025-50399: Buffer Copy without Checking Size of Input
FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter password...
CVE-2025-13449
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2025-13449
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...
EUVD-2025-198251
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2025-13449
The CVE-2025-13449 entry concerns code-projects Online Shop Project 1.0. The vulnerability arises from improper handling of the Password parameter in the login.php processing, resulting in a SQL injection risk. Multiple connected sources (Red Hat, NVD, CVE lists, vulnerability enrichment) confirm...
PT-2025-47552
Name of the Vulnerable Software and Affected Versions code-projects Online Shop Project version 1.0 Description A flaw exists in the processing of the /login.php file within the software. Manipulating the Password argument can lead to a SQL injection. This issue is remotely exploitable and detail...
EUVD-2025-198158
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
Student Record Management System login.php File SQL Injection Vulnerability
Student Record Management System is a software application. Student Record Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the id and password parameters of login.php. An attacker can exploit this...
CVE-2024-44641
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...
PHPGurukul Online Shopping Portal 安全漏洞
Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the email parameter of forgot-password.php. No details of the vulnerability are available at this time...
PT-2025-47202
Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...